Microsoft Edge / Internet Explorer HandleColumnBreakOnColumnSpanningElement Type Confusion

Microsoft Edge and IE: Type confusion in HandleColumnBreakOnColumnSpanningElement CVE-2017-0037 PoC: .class1 float: left; column-count: 5; .class2 column-span: all; columns: 1px; table border-spacing: 0px; function boom document.styleSheets0.media.mediaText = "aaaaaaaaaaaaaaaaaaaa"; th1.align =...

Security Update for Adobe Flash Player for Windows Server 2012 (KB4010250)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Adobe Flash Player for Windows Server 2012 R2 (KB4010250)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Design/Logic Flaw

gdi32.dll in Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process heap...

Hyper-V hosts crash in csvfs.sys in Windows Server 2012 R2

Hyper-V hosts crash in csvfs.sys in Windows Server 2012 R2 Symptoms Windows Server 2012 R2 Hyper-V hosts may crash in the csvfs.sys file process when you perform backup with certain backup applications. Cause This issue occurs if a backup solution sends the CsvControlQueryFileRevision request on ...

WinaXe Plus 8.7 Buffer Overflow

Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version: 8.7 Tested on: Windows Server 2008 R2 x64, Windows 7 SP...

WinaXe Plus 8.7 - Remote Buffer Overflow

Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version: 8.7 Tested on: Windows Server 2008 R2 x64, Windows 7 SP...

WinaXe Plus 8.7 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: WinaXe Plus 8.7 - lpr remote buffer overflow Date: 2017-01-16 Exploit Author: Peter Baris Exploit link: http://www.saptech-erp.com.au/resources/winaxelpr.zip Software Link: http://www.labf.com/download/winaxep-ok.html Version...

Security Update for Adobe Flash Player for Windows Server 2012 R2 (KB3214628)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Adobe Flash Player for Windows Server 2012 (KB3214628)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege...

MS14-057: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: October 14, 2014 View products that this article applies to. Introduction The security update resolves the vulnerabilities that could allow elevation of privilege by improving how...

MS14-057: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: October 14, 2014 View products that this article applies to. Introduction The security update resolves the vulnerabilities that could allow elevation of privilege by improving how the...

MS14-057: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: October 14, 2014 View products that this article applies to. Introduction This security update resolves vulnerabilities that could allow remote code execution if an attacker sends a...

MS14-046: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: August 12, 2014

MS14-046: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: August 12, 2014 View products that this article applies to.This update resolves a vulnerability in the Microsoft .NET Framework that could bypass the Address Space Layout Randomization AS...

Update Rollup 4 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 4 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Virtual Machine Manager VMM. There are two updates available for System Center 2012 R2 Virtual Machine Manager. On...

MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow denial of service if...

MS14-036: Description of the security update for Windows 8.1 and Windows Server 2012 R2: June 10, 2014

MS14-036: Description of the security update for Windows 8.1 and Windows Server 2012 R2: June 10, 2014 Introduction This security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user opens a specially crafted file or...

Update Rollup 3 for Windows Server 2012 Essentials

Update Rollup 3 for Windows Server 2012 Essentials Introduction This article lists the issues that are fixed in Update Rollup 3 for Windows Server 2012 Essentials. Important This update rollup contains server-side fixes. After you apply this update rollup, the client-side package is installed...

MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT 8.1, and Windows Server 2012 R2: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT 8.1, and Windows Server 2012 R2: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege if a user...